$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft File: 373B103C68D9B84455801815E437C49839794406.mft (raw, json) Hash identifier: zqxiNNnYZFZEwIz2wDr51daKIpXQUCQh/YV9reBS6zg= Subject key identifier: 52:8F:A8:F1:2E:DB:AC:17:89:C3:DA:B7:2C:20:9E:3D:2F:62:CC:7D Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406 Certificate serial: 2BE579E72CF59A9DC36163F24BCCD154D0132FC3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 17:03:16 +0000 Manifest this update: Sun 01 Mar 2026 16:58:16 +0000 Manifest next update: Mon 02 Mar 2026 20:10:16 +0000 Files and hashes: 1: 373B103C68D9B84455801815E437C49839794406.crl (hash: WdyH6fjy0uawQn55qdrSFSx9w0z9XiQVfKQTmDD1/q0=) 2: 3131302e3233362e302e302f31352d3135203d3e2039383038.roa (hash: hEDr8/74LWqVAxQIAl/qC7YYDZiTh64u3Td4QxxhlWk=) 3: 3138322e3135372e302e302f31362d3136203d3e2039383038.roa (hash: bb97oY6zPLsKhBLVa0rQlewA3WGo8q51y04BsHtNgQM=) 4: 3131332e31382e302e302f31362d3136203d3e2039383038.roa (hash: l2TtlQd2OeYBccu9u8JTA5koymL/HDwH4svd8KIbs00=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 20:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e5:79:e7:2c:f5:9a:9d:c3:61:63:f2:4b:cc:d1:54:d0:13:2f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373B103C68D9B84455801815E437C49839794406 Validity Not Before: Mar 1 16:58:16 2026 GMT Not After : Mar 2 20:10:16 2026 GMT Subject: CN=528FA8F12EDBAC1789C3DAB72C209E3D2F62CC7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:20:ce:4a:88:f3:86:dc:ca:15:34:bf:e4: fb:27:ed:3d:d4:c3:f2:bf:96:55:d7:bd:42:66:4f: 3b:3f:83:34:1c:ee:2c:b1:fc:5c:81:50:b0:6d:5d: b4:c3:60:6f:e0:a8:8c:22:a6:01:a7:ce:5c:92:c7: b2:f7:7e:75:7d:a6:60:e7:7f:c9:04:19:6e:53:07: 2f:70:fd:e2:14:48:5c:bf:71:35:3b:e8:3f:97:40: 7a:99:8e:3c:e5:1c:7f:46:56:58:b6:d2:57:bf:ea: 50:2e:83:9f:0e:cd:8f:a6:2c:a4:43:9c:71:ca:47: b3:25:c3:95:83:c5:22:4a:32:ab:16:f6:91:78:df: cd:58:2c:d1:29:c4:d0:ad:56:0f:fc:fc:55:aa:23: b5:d7:d0:79:41:1c:20:30:c6:41:e0:4c:5d:df:71: bd:e2:b4:7b:c5:2f:3e:fd:44:ff:d8:61:2c:5a:28: f4:51:9c:8a:50:16:05:76:9e:9a:60:9b:b5:f6:98: 0b:00:52:4e:b8:71:b0:e2:0c:2c:57:ab:af:e3:d5: 2e:f8:d4:7a:fc:5a:6d:42:94:3e:f7:33:09:28:93: 84:f2:a2:b5:64:f9:0c:8f:d5:33:38:a1:fe:5f:1b: f4:75:23:76:f2:ec:b0:b4:e4:e8:e5:a6:e1:47:98: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8F:A8:F1:2E:DB:AC:17:89:C3:DA:B7:2C:20:9E:3D:2F:62:CC:7D X509v3 Authority Key Identifier: keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:38:4c:8d:46:17:60:0d:13:d9:5f:d8:17:a3:b4:42:09:9a: 9d:80:a0:00:04:b7:e6:a1:f7:64:9c:cc:9e:17:f0:86:76:53: ba:ed:7e:f4:5c:56:c0:9b:42:91:d4:aa:86:78:80:28:6e:50: ad:76:70:6c:7e:92:ef:91:b4:1b:12:7f:5d:ed:0f:30:ca:f5: 9c:72:ce:6d:44:30:63:92:4e:b9:b8:f0:5c:74:15:2e:1c:8b: af:2b:a5:c9:6b:cb:20:fc:84:75:97:36:d5:64:68:39:01:60: 55:68:47:ae:45:ed:99:35:3d:ad:08:fd:ba:3a:1e:d3:78:0f: 4b:98:99:96:b7:37:cb:48:85:03:22:f8:44:4f:84:20:a4:d4: fd:31:e3:e6:8d:6c:af:bc:b7:67:cc:c8:5b:5e:03:62:60:d3: 41:60:07:eb:d2:75:7c:a9:43:20:1a:3a:35:54:4a:85:27:a1: b6:97:59:14:4e:0b:d9:91:5f:da:71:5b:51:14:6d:75:31:8d: a6:59:1f:cb:04:df:06:e9:c8:01:85:c1:d7:10:94:22:5c:c4: ff:07:e1:b6:ea:08:13:a1:03:b6:44:3c:bc:9f:39:d8:18:b9: 7e:0b:d1:18:09:d8:b6:72:5e:77:b3:18:a9:27:67:dd:99:20: 82:f3:af:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK+V55yz1mp3DYWPyS8zRVNATL8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgz OTc5NDQwNjAeFw0yNjAzMDExNjU4MTZaFw0yNjAzMDIyMDEwMTZaMDMxMTAvBgNV BAMTKDUyOEZBOEYxMkVEQkFDMTc4OUMzREFCNzJDMjA5RTNEMkY2MkNDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7iCDOSojzhtzKFTS/5Psn7T3U w/K/llXXvUJmTzs/gzQc7iyx/FyBULBtXbTDYG/gqIwipgGnzlySx7L3fnV9pmDn f8kEGW5TBy9w/eIUSFy/cTU76D+XQHqZjjzlHH9GVli20le/6lAug58OzY+mLKRD nHHKR7Mlw5WDxSJKMqsW9pF4381YLNEpxNCtVg/8/FWqI7XX0HlBHCAwxkHgTF3f cb3itHvFLz79RP/YYSxaKPRRnIpQFgV2nppgm7X2mAsAUk64cbDiDCxXq6/j1S74 1Hr8Wm1ClD73Mwkok4TyorVk+QyP1TM4of5fG/R1I3by7LC05OjlpuFHmBFfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUo+o8S7brBeJw9q3LCCePS9izH0wHwYDVR0j BBgwFoAUNzsQPGjZuERVgBgV5DfEmDl5RAYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQ2ODIyNy8wLzM3M0IxMDNDNjhEOUI4NDQ1NTgwMTgxNUU0MzdD NDk4Mzk3OTQ0MDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgzOTc5NDQwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0NjgyMjcvMC8zNzNCMTAzQzY4RDlC ODQ0NTU4MDE4MTVFNDM3QzQ5ODM5Nzk0NDA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzhMjUYXYA0T 2V/YF6O0QgmanYCgAAS35qH3ZJzMnhfwhnZTuu1+9FxWwJtCkdSqhniAKG5QrXZw bH6S75G0GxJ/Xe0PMMr1nHLObUQwY5JOubjwXHQVLhyLryulyWvLIPyEdZc21WRo OQFgVWhHrkXtmTU9rQj9ujoe03gPS5iZlrc3y0iFAyL4RE+EIKTU/THj5o1sr7y3 Z8zIW14DYmDTQWAH69J1fKlDIBo6NVRKhSehtpdZFE4L2ZFf2nFbURRtdTGNplkf ywTfBunIAYXB1xCUIlzE/wfhtuoIE6EDtkQ8vJ852Bi5fgvRGAnYtnJed7MYqSdn 3ZkggvOvUQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:51:25 2026 by rpki-client